Privacy

Signing in is optional and works by email. If you sign in we keep your address, your language and when you last signed in, and each sign-in link is sent through Resend, our email provider. A link works once and for 20 minutes; a signed-in browser keeps a session cookie for up to 90 days.

A search stays in the URL. Nothing is stored until you press save, and a saved trip contains the itinerary, the search that produced it and a random share code - and, if you were signed in, which account saved it.

To keep the free allowance fair, each browser gets a random, signed ID in a cookie, kept for up to 400 days, and we count the trips planned each month against that ID and against a code computed from your IP address with a secret key. The code is stored, never the address.

Your brief is sent to Google to generate the itinerary, and departure and destination airports go to Travelpayouts to price flights. Place names go to OpenStreetMap when a coordinate needs checking, and the stops on a day go to the OpenStreetMap routing service to draw the line between them. Sign-in emails go through Resend. Nothing else leaves the server.

Anyone with a share link can read that trip, which is the point of a share link. There is no way to list trips, so a link is the only way in.

The map draws its tiles from OpenFreeMap, so your browser contacts them directly and they see your address and the area you are looking at. That is the only request this site makes to anyone else from your side.

When you follow a booking link we record which partner it went to and when, so we can tell which trips actually lead to bookings. It is not tied to you: no IP address, no device, no identity - only the trip, the partner and the time.

We count visits ourselves, without cookies: which pages are read, in which language, on a phone or a computer, and which site sent you, reduced to its domain. To tell visitors apart within a day we keep a code computed from your address and browser that changes every day, so nobody can be followed from one day to the next. Counts are kept for 400 days. There is no outside analytics product, no advertising and no tracking pixel.

Two places keep an email address: your account, if you sign in, and the Pro and Concierge waitlist on the pricing page, which stores the address, the plan you asked about, your language and the date, for one message when that plan opens. Write to hello@trailnights.com and we will delete either.